Privacy policy

Last updated: September 7, 2026

This policy explains how Artistic Apex handles personal information when you visit our store, order from us, use a customer account or contact us. It also explains who helps us run the store and how you can exercise your privacy rights.

1. Who is responsible

Artistic Apex is a sole proprietorship operated by James Fischer in Switzerland. We are the controller of the personal information we process for our store.

Postal address: Artistic Apex, James Fischer, Alfred-Schindlerstrasse 58, 6030 Ebikon, Switzerland.

Email: shop@artistic-apex.com. You can also use our contact form for questions or privacy requests.

2. Information we collect

• Orders and payments: your name, email, billing and delivery addresses, purchased items, garment and print choices, prices, payment status, transaction references, delivery updates and return or refund history. Payment details are processed through Shopify Checkout and the payment service you choose. We do not ask you to send card details by email or through our contact form.
• Customer accounts: your email, account identifier, saved addresses and order history. Shopify provides sign-in using an email code or Shop. The account service processes the information needed to verify your sign-in.
• Messages and custom requests: your contact details, messages, order references and any artwork or photographs you send, including product-problem photos. Only send personal information needed for your request.
• Store visits: IP address, device and browser information, approximate location, pages and products viewed, searches, cart activity, timestamps, cookie identifiers and privacy choices. Collection and use depend on the function and applicable consent settings.
• Existing review records: reviewer name, email, submitted text or media, rating and related order or review-request records. Our storefront review display and automatic review-request emails are currently paused; see section 4.

We receive information directly from you, through Shopify as you use the store, and from payment, production and delivery providers when they report payment, fulfilment or support events. Required checkout fields are needed to process and deliver your order. Without them, we cannot complete the purchase. An account is not required to buy from us.

3. Why we use it

Where the EU or UK GDPR applies, we rely on the following legal grounds. Swiss data protection law applies to our processing as a Swiss business.

• Orders, accounts and support relating to a purchase: to take payment, produce and ship your item, provide account access, send order updates, and handle cancellations, returns and product problems. The basis is performing our contract with you or taking steps at your request before a contract (Article 6(1)(b)). This also covers assessing a custom-order request.
• Legal duties: to keep required accounting records, meet tax and consumer-law duties, and respond to binding requests from authorities. The basis is compliance with a legal obligation (Article 6(1)(c)).
• Store security and administration: to detect fraud and abuse, troubleshoot failures, respond to general enquiries, manage existing review records and establish or defend legal claims. The basis is our legitimate interests in a secure, functioning business and resolving disputes (Article 6(1)(f)), balanced against your rights. You can object as explained below.
• Optional cookies and related uses: where consent is required for analytics, personalisation or advertising, the basis is your consent (Article 6(1)(a)). The available controls are explained in section 5. Reading this policy or purchasing an item does not itself give consent to optional tracking.

Shopify and payment providers also use technical and transaction signals to assess security and payment risk. If a payment or order is blocked, contact us to request a review; the payment provider may also need to review its own decision.

4. Services that receive information

Shopify. Shopify hosts the website and provides checkout, customer accounts, store search and other platform functions. It processes information about visits, purchases and account activity. Shopify acts on our behalf for core store processing and has separate responsibilities for services it provides for its own purposes.

Shopify Network Intelligence is enabled. This allows enhanced services to draw on interactions with our store, other merchants and Shopify. These services support functions such as security, personalisation and advertising. Information is shared with Shopify and its service providers, including in other countries. Some uses qualify as sharing or targeted advertising under certain US privacy laws. Shopify explains its own processing in the Shopify Consumer Privacy Policy. See section 5 for your choices.

Printify and production partners. We use Printify, Inc. and the print providers it connects to fulfil made-to-order purchases. They receive the order, recipient and delivery information needed to print, ship and resolve product issues, along with customer artwork where it forms part of the order. Printify processes customer information on our behalf under its Data Processing Terms. Its Privacy Policy provides further information.

Judge.me. Judge.me Ltd provides the connected review app. We have paused its storefront widgets and automatic review-request emails. The app remains installed, so pausing these features does not remove its access to order and customer information or erase existing review records. Relevant records can include names, email addresses, orders, fulfilment events, reviews and request history. See Judge.me's Privacy Policy. Contact us about information already held through the app.

Email and contact enquiries. Messages to our shop address are forwarded to our Gmail inbox. Our domain's mail routing uses Mailgun. These services process sender and recipient details, message contents, attachments and technical delivery information so we can receive and answer enquiries. The website contact form is provided by Shopify. See the Google Privacy Policy and Mailgun Privacy Policy for their processing.

Payment, delivery and business support. The payment method chosen at checkout receives the information needed to authorise payment, prevent fraud and process refunds. Carriers receive recipient and shipment information and return delivery updates. IT and professional advisers receive information needed to provide their services. Authorities receive information where disclosure is legally required. A provider acting independently, such as a payment service used through your own account, also applies its own privacy notice.

5. Cookies and privacy choices

The store uses cookies and similar technologies for functions such as the cart, checkout, account sessions, security and remembering privacy choices. Optional uses include analytics, personalisation and advertising connected with Shopify's services. Where consent is legally required, those optional uses require your consent.

Where our cookie banner is displayed, you can reject optional uses or choose your preferences. Use Cookie preferences in the store footer, where available, to revisit your choice. The banner and available controls depend on your location. Browser settings can also remove or block cookies, although blocking necessary cookies can affect shopping and sign-in.

For Shopify's enhanced services, use the Shopify Privacy Portal to manage applicable consent, objections and other privacy requests.

Depending on your US state, you can opt out of processing described as sale, sharing or targeted advertising through Your Privacy Choices. Shopify's regional opt-out tools also support Global Privacy Control signals. You can contact us by email as another way to request an opt-out. We do not exchange customer records for money; this does not exclude processing that falls within broader legal definitions of sharing or sale.

Withdrawal of consent does not affect processing that was lawful before withdrawal. Necessary order processing and legally required record-keeping can continue on their separate grounds.

6. Processing in other countries

We operate in Switzerland. Our providers work internationally, so information can be stored or accessed outside your country. The locations involved depend on the service, the product and its delivery route.

• Shopify: Shopify International Limited in Ireland initially handles data from EEA, UK and Swiss customers. Shopify's published provider list includes entities in Canada, the United States, Singapore, Ireland, France, Germany, Italy, Lithuania, the Netherlands, Poland, Spain, Sweden, the United Kingdom, Australia, India, Japan and New Zealand. The Shopify subprocessor list identifies their functions and the data involved; not every listed service is used for every customer.
• Printify: its disclosed company locations include the United States, Latvia, Poland, Spain and the United Kingdom. Our catalogue includes Printify Choice and products from OPT OnDemand and SwiftPOD. OPT OnDemand lists production in Czechia; SwiftPOD lists facilities in the United States and Mexico. Choice selects a provider for the order. Carriers also process delivery information in the destination country and along the shipment route. Printify's provider directory gives production and carrier details. Contact us for information about the provider used for your order.
• Judge.me: the app provider is in the United Kingdom. Its published customer-data subprocessors include providers in the United States, Ireland, Italy, Switzerland and Canada, depending on the features used. See the Judge.me subprocessor list.
• Email: Gmail is provided to Swiss users by Google Ireland Limited, with international processing by Google, including in the United States. Google describes its worldwide infrastructure in its data centre directory and its protections in its transfer frameworks. Mailgun Technologies, Inc. is a US provider; mail routing can involve processing in the United States.

International transfers must have the protection required by the law that applies. Depending on the recipient and country, this is an applicable adequacy decision or contractual safeguards, such as the European Commission's Standard Contractual Clauses with required UK or Swiss provisions. Shopify's Data Processing Addendum, Printify's Data Processing Terms and Judge.me's subprocessor information describe their transfer arrangements. Contact us for further information or a copy of relevant safeguards, with confidential information redacted where necessary.

7. How long information is kept

The period depends on the record and why it is needed:

• Orders and accounting: we retain records needed for payment, delivery, returns, warranties and disputes. Accounting books and supporting accounting records subject to Swiss retention law must generally be kept for ten years from the end of the relevant financial year. This does not mean every piece of customer information needs to be kept for ten years.
• Accounts: account details are kept while needed to provide the account. You can request deletion. Closing an account does not remove order records that must be retained separately.
• Messages, custom artwork and product-problem photos: we keep this material for handling the request or order and any related complaint, warranty or legal claim. Once it is no longer needed for those purposes or a legal retention duty, it is due for deletion. Copies held in our email inbox are included in this assessment.
• Technical records and privacy choices: retention depends on security investigations, diagnosing failures, the duration of the relevant cookie or session, and the need to record and respect a consent or opt-out choice.
• Review records: pausing Judge.me does not delete its stored records. Retention depends on managing existing submissions, resolving requests and any applicable legal obligations. You can request deletion through us.

We assess deletion requests against these purposes and any mandatory retention duties. Where information must be kept, its continued use is limited to the reason for retaining it. Provider deletion processes and backup cycles can differ; we do not promise that every copy disappears immediately.

8. Your rights and how to use them

Depending on applicable law, you can ask to access or receive a copy of your information, correct it, delete it, restrict its use or receive it in a portable format. You can object to processing based on legitimate interests and withdraw consent where we rely on it. Where applicable, you can also opt out of sale, sharing, targeted advertising or certain profiling. Some rights have legal exceptions.

Email shop@artistic-apex.com or use our contact form. We may need proportionate information to verify your identity or an authorised representative's authority. We respond within the period required by applicable law and explain any refusal or permitted extension. You will not receive unlawful discriminatory treatment for exercising a privacy right. Where an appeal right applies, reply asking us to review our decision.

You may complain directly to the competent data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EEA or UK, you may contact the authority competent for your residence, workplace or the alleged infringement. You do not have to contact us first.

9. Children, security and changes

The store is intended for adults who can enter into a purchase contract. Do not submit personal information about children in custom artwork or delivery instructions. If you believe a child has provided personal information, contact us so we can address it.

We use access restrictions and the security features of our service providers to protect information. No online service can guarantee absolute security. Please do not send passwords, payment credentials or unnecessary sensitive information in messages.

We update this policy when the store's processing changes or new information is needed. The date above identifies this version. Where required, we provide additional notice or request consent before a new use begins.